Marquis Software Solutions
Disclosed Nov 26, 202510 months ago400,000 affectedConfirmed
Ransomware at bank marketing vendor Marquis exposes 400,000+ customers
Marquis, a marketing and compliance vendor to over 700 banks and credit unions, said an August 14, 2025 ransomware attack via a SonicWall firewall flaw exposed customer data including SSNs; state filings showed at least 400,000 affected.
What is known
| People affected | 400,000 (as reported by the organization) |
|---|---|
| Disclosed | Nov 26, 2025 |
| Discovered | Aug 14, 2025 |
| Happened | Aug 14, 2025 |
| Attack | Ransomware |
| Data exposed | Names, Social Security numbers, Financial, Payment cards, Dates of birth, Addresses |
| Sector | Finance · US |
| Status | Confirmed |
Sources
Notices filed
| Where | Filed | People |
|---|---|---|
| Washington AGresidents of WA | Nov 26, 2025 | 269,773 |
| Delaware DOJresidents of DE | Nov 26, 2025 | 937 |
| Vermont AGresidents of VT | Nov 26, 2025 | |
| Researchtotal | Dec 1, 2025 | 400,000 |
| California AGresidents of CA | Dec 2, 2025 | |
| Texas AGresidents of TX | Dec 2, 2025 | 354,289 |
| Oregon DOJresidents of OR | Dec 15, 2025 | 13,169 |
| California AGresidents of CA | Feb 11 | |
| California AGresidents of CA | Mar 16 | |
| Vermont AGresidents of VT | Mar 16 | |
| Washington AGresidents of WA | Mar 17 | 269,773 |
History of this record
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-11-26-marquis-software-solutions-data-breach-notice-consumers · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2026-03-16-marquis-software-solutions-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: ["names","ssn","financial"] to ["names","ssn","financial","payment-card","dob","addresses"] · backfill source
- 2026-09-25 · sector: tech to finance · seed source
- 2026-09-25 · data_types: ["names"] to ["names","ssn","financial"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 400000 · seed source
- 2026-09-25 · summary: empty to Marquis, a marketing and compliance vendor to over 700 banks and credit unions, said an August 14, 2025 ransomware attack via a SonicWall firewall flaw exposed customer data including SSNs; state filings showed at least 400,000 affected. · seed source
- 2026-09-25 · title: empty to Ransomware at bank marketing vendor Marquis exposes 400,000+ customers · seed source
- 2026-09-25 · data_types: [] to ["names"] · backfill source
- 2026-09-25 · disclosed: 2025-12-02 to 2025-11-26 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2025-08-14 · backfill source
- 2026-09-25 · disclosed: 2026-02-11 to 2025-12-02 · backfill source
- 2026-09-25 · disclosed: 2026-03-16 to 2026-02-11 · backfill source
- 2026-09-25 · occurred: empty to 2025-08-14 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.